Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wjJ4UQNtmmVm7pbW5uK4gN4fnyE.roa
File: wjJ4UQNtmmVm7pbW5uK4gN4fnyE.roa (raw, json)
Hash identifier: XsnkhloSBZ9bplXNYMT6mFeroDVdtDNX2Bz7EriAGbw=
Subject key identifier: C2:32:78:51:03:6D:9A:65:66:EE:96:D6:E6:E2:B8:80:DE:1F:9F:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20BC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wjJ4UQNtmmVm7pbW5uK4gN4fnyE.roa
Signing time: Fri 25 Nov 2022 04:39:03 +0000
ROA not before: Fri 25 Nov 2022 04:39:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8380 (0x20bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2327851036D9A6566EE96D6E6E2B880DE1F9F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:a8:b0:87:e0:1e:59:1b:c8:e4:49:ca:77:
53:6a:3f:95:fb:7b:b9:67:56:77:ec:79:97:4d:3e:
40:5d:f6:6a:bc:54:fe:02:17:df:9a:77:38:04:3c:
2c:81:a5:ed:a4:ec:9c:70:8b:07:52:53:08:2a:14:
e7:d4:03:f4:69:d8:d9:cf:77:b0:4a:8b:17:3f:12:
a5:5c:ba:19:98:14:e5:50:64:74:d9:ca:66:29:eb:
28:6b:92:eb:72:9a:ec:85:9c:7c:1b:e3:c6:bf:78:
9c:6a:20:8a:25:da:92:54:fd:6d:c5:c7:a0:b3:51:
41:20:8e:6a:d8:aa:2e:f2:ec:49:38:b7:7d:1a:33:
ee:bc:cf:82:24:53:16:09:08:52:3e:50:e1:df:16:
cd:84:76:1e:4b:14:b1:8a:7c:20:07:a5:d8:4a:2e:
29:9d:9d:70:be:5f:3d:0a:ab:0f:12:21:06:5d:1c:
04:a8:00:b5:29:fc:1e:05:b1:8a:01:89:2a:db:b5:
35:e2:1d:26:57:fc:b2:1a:a3:3f:b2:f6:46:3b:92:
a9:58:2b:65:3c:37:0f:05:4f:92:b0:d3:bb:78:34:
af:f6:36:cb:05:50:c6:7c:0f:2d:94:3c:56:34:66:
a7:1b:3c:35:a0:4d:b6:b2:76:37:04:01:bc:87:49:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:32:78:51:03:6D:9A:65:66:EE:96:D6:E6:E2:B8:80:DE:1F:9F:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wjJ4UQNtmmVm7pbW5uK4gN4fnyE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:5a:cf:c4:7b:d1:35:7e:dd:19:18:0b:81:fb:b5:c2:f1:27:
53:ec:16:57:b3:69:04:f5:d1:7b:ec:03:86:98:9d:80:8d:a9:
7f:b1:d4:36:b1:9b:81:10:6e:a7:0f:02:b4:ee:e2:96:d7:07:
dc:cd:81:ef:34:64:b8:0d:b8:b7:b9:a9:a5:d0:bb:de:13:e3:
03:da:05:aa:79:e8:33:0d:77:13:ae:25:8b:53:03:82:0f:8a:
bc:c3:b9:32:ed:43:33:e1:3a:fc:f7:dd:21:db:a8:56:f6:f3:
8e:57:72:5b:d0:0f:29:4b:89:09:fd:a2:51:98:72:90:5a:6a:
18:56:e6:33:7c:a2:e6:21:35:f3:a5:05:19:c9:18:fe:7c:52:
65:4d:17:9c:31:15:6e:73:9e:0d:b0:eb:a7:e6:05:42:4a:53:
73:bf:f1:2a:d4:b3:a1:fe:a3:72:61:d7:02:c2:86:e6:62:a7:
4b:0b:0e:6c:9f:86:3d:18:92:0f:36:50:38:4c:d9:a2:90:7f:
0f:ae:8f:a7:c7:ca:c2:81:56:9d:1f:c2:d9:0e:87:e1:aa:67:
c1:da:2c:82:11:a1:3f:63:2a:fe:3c:77:85:d4:44:36:ee:95:
10:f7:94:f0:16:c1:b9:7a:84:a0:33:0f:ff:19:14:72:db:5f:
26:de:44:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICILwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEMyMzI3ODUxMDM2RDlB
NjU2NkVFOTZENkU2RTJCODgwREUxRjlGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSOKiwh+AeWRvI5EnKd1NqP5X7e7lnVnfseZdNPkBd9mq8VP4C
F9+adzgEPCyBpe2k7JxwiwdSUwgqFOfUA/Rp2NnPd7BKixc/EqVcuhmYFOVQZHTZ
ymYp6yhrkutymuyFnHwb48a/eJxqIIol2pJU/W3Fx6CzUUEgjmrYqi7y7Ek4t30a
M+68z4IkUxYJCFI+UOHfFs2Edh5LFLGKfCAHpdhKLimdnXC+Xz0Kqw8SIQZdHASo
ALUp/B4FsYoBiSrbtTXiHSZX/LIaoz+y9kY7kqlYK2U8Nw8FT5Kw07t4NK/2NssF
UMZ8Dy2UPFY0ZqcbPDWgTbaydjcEAbyHSQhHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwjJ4UQNtmmVm7pbW5uK4gN4fnyEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dqSjRVUU50bW1WbTdwYlc1
dUs0Z040Zm55RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wxwwDQYJKoZIhvcNAQELBQADggEBAA1az8R70TV+3RkYC4H7tcLxJ1PsFlezaQT1
0XvsA4aYnYCNqX+x1Daxm4EQbqcPArTu4pbXB9zNge80ZLgNuLe5qaXQu94T4wPa
Bap56DMNdxOuJYtTA4IPirzDuTLtQzPhOvz33SHbqFb2845XclvQDylLiQn9olGY
cpBaahhW5jN8ouYhNfOlBRnJGP58UmVNF5wxFW5zng2w66fmBUJKU3O/8SrUs6H+
o3Jh1wLChuZip0sLDmyfhj0Ykg82UDhM2aKQfw+uj6fHysKBVp0fwtkOh+GqZ8Ha
LIIRoT9jKv48d4XURDbulRD3lPAWwbl6hKAzD/8ZFHLbXybeRHs=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org